This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer File: A0234EE8675FA5228CCCF9670EE151D623AC6958.cer (raw, json) Hash identifier: xP9BscsTUaQzWcjBpMWsYYyZnXLmewvCF7qcGUu8Qqs= Subject key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0680FC1040967AD186199B21E849E2964E6EDC6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:19:51 +0000 Certificate not after: Mon 18 Jan 2027 11:24:51 +0000 Subordinate resources: IP: 2401:5180::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:80:fc:10:40:96:7a:d1:86:19:9b:21:e8:49:e2:96:4e:6e:dc:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:19:51 2026 GMT Not After : Jan 18 11:24:51 2027 GMT Subject: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:8c:d3:83:58:88:d9:b0:db:19:2a:d5:22: 9f:97:6f:be:7d:38:0f:09:e7:0d:9d:2b:36:80:4a: 15:2e:b0:72:5c:b8:ee:2e:3d:1d:55:6d:25:25:99: 59:8d:df:f4:f1:85:4b:6f:16:8d:2b:c3:98:ec:86: 8a:d6:39:49:4b:be:83:0e:1f:49:5a:8d:68:09:26: 34:cc:3b:bd:70:08:38:5f:91:60:7f:2c:c8:b5:63: a1:37:9a:c4:fb:af:59:d5:79:4a:70:3f:d0:47:52: bf:5a:cd:96:ba:05:2e:83:66:9a:e1:d6:6a:32:b3: d0:98:d6:e2:25:89:8d:1b:15:72:eb:ca:1c:f0:6c: d8:72:0b:10:54:9a:42:37:b6:be:84:9a:c3:f5:72: 83:21:d2:6e:72:33:09:94:a7:74:22:80:40:29:a4: 34:b1:17:dc:f3:ba:e3:60:3c:a2:b1:46:0a:94:a4: 5e:31:1a:5a:5f:22:61:2d:d3:0b:11:d3:a1:3d:30: a0:2f:43:b2:85:f8:cb:fd:8b:9e:11:52:1f:8b:d6: a0:fe:a0:ca:70:e8:20:ee:16:4c:e7:79:14:3f:0f: d8:f5:b2:78:d5:d8:66:3b:28:d7:ed:bf:c7:95:cc: 10:14:87:3e:9d:a6:3a:b2:78:9c:6f:6f:8b:e0:01: c7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:5180::/32 Signature Algorithm: sha256WithRSAEncryption 77:68:b4:df:d3:9f:05:71:0f:ee:39:3a:c8:de:89:8f:6a:bf: f8:e3:ac:b1:e0:d7:01:39:ae:21:46:d0:d5:49:43:40:b9:9b: c8:09:7c:a8:c8:af:cb:44:d6:11:37:b8:90:ad:dc:9d:3e:39: 7b:f5:23:b1:c0:8d:e4:d6:23:9a:2b:c4:06:2a:f2:66:7f:9e: 94:d8:c8:db:17:1f:05:52:aa:f1:a9:e3:1d:8d:1a:7a:be:a7: 8a:7b:68:20:91:bb:7b:76:ac:03:de:6f:00:2e:77:fe:1c:01: 17:64:ed:f5:98:b4:3a:94:19:05:4c:12:ba:cd:73:e4:08:93: ea:ee:d0:0e:2d:ba:04:69:f1:d4:95:94:ea:59:db:76:43:45: 14:65:a2:fa:d3:50:0d:7d:cf:9c:28:5c:b2:13:f8:fe:6e:5f: 64:99:6b:8e:7d:e6:6d:41:a0:af:a3:e5:a2:f1:03:0c:de:39: 4b:7e:2d:1a:56:fb:0b:fe:16:8d:7e:36:36:15:df:8a:3a:a2: 83:48:b1:51:e5:87:01:ac:c7:de:13:63:96:a9:92:3b:81:5c: 17:81:c8:57:29:7a:a7:cc:d1:5b:63:64:07:6a:c4:25:17:a6: cd:18:b3:e2:c0:a0:dc:31:7b:37:8a:14:e6:64:16:d5:13:c4: 59:b1:fa:ce -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUBoD8EECWetGGGZsh6Enilk5u3G0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTk1MVoX DTI3MDExODExMjQ1MVowMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NG OTY3MEVFMTUxRDYyM0FDNjk1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN10jNODWIjZsNsZKtUin5dvvn04DwnnDZ0rNoBKFS6wcly47i49HVVtJSWZ WY3f9PGFS28WjSvDmOyGitY5SUu+gw4fSVqNaAkmNMw7vXAIOF+RYH8syLVjoTea xPuvWdV5SnA/0EdSv1rNlroFLoNmmuHWajKz0JjW4iWJjRsVcuvKHPBs2HILEFSa Qje2voSaw/VygyHSbnIzCZSndCKAQCmkNLEX3PO642A8orFGCpSkXjEaWl8iYS3T CxHToT0woC9DsoX4y/2LnhFSH4vWoP6gynDoIO4WTOd5FD8P2PWyeNXYZjso1+2/ x5XMEBSHPp2mOrJ4nG9vi+ABxyUCAwEAAaOCApswggKXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKAjTuhnX6UijMz5Zw7hUdYjrGlYMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTcyODAwMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNzI4MDAx LzAvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAVGAMA0GCSqGSIb3DQEBCwUAA4IBAQB3aLTf 058FcQ/uOTrI3omPar/446yx4NcBOa4hRtDVSUNAuZvICXyoyK/LRNYRN7iQrdyd Pjl79SOxwI3k1iOaK8QGKvJmf56U2MjbFx8FUqrxqeMdjRp6vqeKe2ggkbt7dqwD 3m8ALnf+HAEXZO31mLQ6lBkFTBK6zXPkCJPq7tAOLboEafHUlZTqWdt2Q0UUZaL6 01ANfc+cKFyyE/j+bl9kmWuOfeZtQaCvo+Wi8QMM3jlLfi0aVvsL/haNfjY2Fd+K OqKDSLFR5YcBrMfeE2OWqZI7gVwXgchXKXqnzNFbY2QHasQlF6bNGLPiwKDcMXs3 ihTmZBbVE8RZsfrO -----END CERTIFICATE-----Generated at Sun Jan 25 05:56:46 2026 by rpki-client